CLAIMS 



What is claimed is: 



^ 1^- A method for providing an inbound controller for a router^e router 
having an inbound port and an outbound port, a memory, ancLa CPU, the 
inbound controller being adapted for receiving an inbound jacket at the 
inbound port, the method comprising: 

providing a plurality of inbound queues for the4nbound port; 

receiving an inbound packet at the inbound/port; 

classifying the inbound packet in a selected one of the plurality of 
inbound queues according to packet sorting criteria; 

storing the inbound packet in the sheeted one of the plurality of inbound 
queues; and 

determining when one of the/plurality of inbound queues is ready to be 
moved to an outbound queue, th^utbound queue being capable of storing a 
multiplicity of inbound queues. 



2. The method as recited in claim 1, further including: 

asserting an interrupt when it is determined that one of the plurality of 
inbound queues is ready to be moved to an outbound queue. 



3. The metjiod as recited in claim 1, wherein classifying the inbound packet 
includes: 



selecting inbound packet sorting criteria; 
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obtaining packet sorting data for the inbound packej^the packet sorting 
data being associated with the packet sorting criteria; apo 

sorting the inbound packet into one of the pmrality of inbound queues 
according to the packet sorting data. / 

4. The method as recited in claim l^he selected one of the plurality of 
inbound queues corresponding to ope of a plurality of outbound queues, 

5. The method as recited it/ claim 1, wherein storing the inbound packet 
includes: / 

obtaining an available packet buffer from a free pool of available packet buffers; 
placing the inboajnd packet in the packet buffer; and 
storing the parcket buffer in the inbound queue. 

6. The method as recited in claim 1, wherein determining when one of the 
plurality of mbound queues is ready to be moved to an outbound queue 
includes: / 

determining whether a number of packets in one of the plurality of 
inbound queues exceeds a maximum number of packets. 

7. / The method as recited in claim 1, wherein determining when one of the 
pmrality of inbound queues is ready to be moved to an outbound queue 
mcludes: 
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determining whether a number of^^K^es in one of the plurality of inbound 
queues exceeds a maximum nunrjfe^ of bytes. 



8. The method as4ecited in claim 1, wherein determining when one of the 
plurality of inbpund queues is ready to be moved to an outbound queue further 
includes: 



determining whether a free pool of available memory has been depleted. 
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9. The method as recited in claim 1, wherein determining wKen one of the 
plurality of inbound queues is ready to be moved to an ouj^mund queue further 
includes: / 

determining whether a maximum time limit has been exceeded. 

10. A method for providing an outbound/controller for a router, the router 
having an inbound port and an outbound port, a memory, and a CPU, the 
outbound controller being adapted for forwarding packets at the outbound port, 
the method comprising: / 

providing an outbound queue associated with the outbound port and being 
capable of storing a plurality ^of inbound queues; 

receiving a notificatiiDn to handle an inbound queue, the inbound queue 
storing a plurality of paoKets; and 

transferring the mbound queue to the outbound queue. 

1 1 . The method as recited in claim 10, wherein receiving the notification 
includes: / 

receiving a notification from the CPU to handle the inbound queue. 

12. The/method as recited in claim 10, further including: 
transmitting packets stored in the outbound queue. 

13. / The method as recited in claim 10, wherein transmitting packets includes: 
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selectively discarding packets stored in the outbound queue./ 

14. The method as recited in claim 10, wherein transmittmg packets stored in 
the outbound queue further includes: / 

obtaining a next one of the plurality of inbouna queues stored in the 
outbound queue; / 

transmitting selected packets stored inirie next one of the plurality of 
inbound queues; and / 

releasing memory associated wi^ the next one of the plurality of inbound 
queues. / 

1 5. The method as recited in claim 14, wherein releasing the memory 
includes: / 

storing the releasee! memory in a free pool of available packet buffers. 

16. The method afe recited in claim 14, wherein releasing the memory 
includes: / 

forming a/new inbound queue to be used by an inbound controller. 

1 7. The mfethod as recited in claim 14, wherein releasing the memory 
includes: / 

forming a queue to be used by the outbound controller during bi- 
directional operation. 
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18. The method as recited in claim 10, wherein transfen^mg the inbound queue 
to the outbound queue further includes: / 

ascertaining a priority of the inbound queue; and 

transferring the inbound queue to the outbound queue according to the 
priority of the inbound queue. / 

19. A method for forwarding a pafcket in a router, the router having a plurality 
of inbound ports and a plurality/of outbound ports, a memory, and a CPU, the 
method comprising: / 

providing a plurality cff inbound queues for one of the plurality of inbound 
ports; / 

providing a plurality of outbound queues, each one of the plurality of 
outbound queues corresponding to one of the plurality of outbound ports and 
being capable of storing a plurality of inbound queues; 

receiving ayi inbound packet at the one of the plurality of inbound ports; 

classifying the inbound packet in a selected one of the plurality of inbound 
queues according to packet sorting criteria; 

storing'^the inbound packet in the selected one of the plurality of inbound 
queues; / 

repeating the steps of receiving, providing, classifying, and storing until an 
interruDT is asserted; and 

transferring one of the plurality of inbound queues to one of the plurality of 
outbound queues corresponding to the packet sorting criteria when the interrupt 
is asserted. 
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20. An inbound controller for a router, the router having^ inbound port and 
an outbound port, a memory, and a CPU, the inbound /Controller being adapted 
for receiving an inbound packet at the inbound port/comprising: 

a packet receiving module coupled to themibound port, the packet 
receiving module being adapted for receiving an inbound packet; 

wherein the memory has stored therein: 

a plurality of inbound quelies for the inbound port; 

a classifier adapted fo/classifying the inbound packet in a selected 
one of the plurality gMF inbound queues according to packet sorting 
criteria; / 

a packet storing^^ module coupled to the classifier, the packet storing 
module being^adapted for storing the inbound packet in the selected 
one of the plurality of inbound queues; and 

a moduleyadapted for determining when one of the plurality of 
inbound/queues is ready to be moved to an outbound queue, the 
outbound queue being capable of storing a multiplicity of inbound 
queues. 

21 . The inbound controller as recited in claim 20, further including: 

a moaule adapted for providing the determined one of the plurality of 
inbound Queues. 

22. Thfe inbound controller as recited in claim 20, further including: 
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a module adapted for asserting an interrupt when it is determinepKhat one 
of the plurality of inbound queues is ready to be moved by the CBtJ to the 
outbound queue. 

23. The inbound controller as recited in claim 2d, wherein the packet storing 
module includes: / 

a memory obtaining module adaoj^ for obtaining an available packet 
buffer from a free pool of available packet buffers; 

a module adapted for placirig the inbound packet in the packet buffer; and 

a module adapted fot/storing the packet buffer in the inbound queue. 

24. The inbound/controller as recited in claim 20, wherein the module adapted 
for determining/when one of the plurality of inbound queues is ready to be 
moved to an cMjtbound queue includes: 

a module adapted for determining whether a number of packets in one of 
the plurality of inbound queues exceeds a maximum number of packets. 
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25. The inbound controller as recited in claim 20, wherein the rpddule adapted 
for determining when one of the plurality of inbound queues j^eady to be 
moved to an outbound queue includes: / 

a module adapted for determining whether a number of bytes in one of the 
plurality of inbound queues exceeds a maximum ptlimber of bytes. 

26. The inbound controller as recited ir/claim 20, wherein the module adapted 
for determining when one of the plurality of inbound queues is ready to be 
moved to an outbound queue inclujaes: 

a module adapted for determining whether a free pool of available memory 
has been depleted. / 

27. The inbound controller as recited in claim 20, wherein the module adapted 
for determining whenyone of the plurality of inbound queues is ready to be 
moved to an outbound queue includes: 

a module adapted for determining whether a maximum time limit has been 
exceeded. / 

28. An outbound controller for a router, the router having an inbound port and 
an outbourjd port, a memory, and a CPU, the outbound controller being adapted 
for forwarding packets at the outbound port, comprising: 

a mpdule adapted for receiving a notification to handle an inbound queue, 
the inbound queue storing a plurality of packets; 

wherein the memory has stored therein: 
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an outbound queue associated with the outbound port anjeKbeing capable 
of storing a plurality of inbound queues; X 

a queue transferring module adapted for transfepnng the inbound queue to 
the outbound queue. / 

29. The outbound controller as recited/iri claim 28, wherein the module 
adapted for receiving the notification includes a module adapted for receiving 
the notification from the CPU. / 

30. The outbound controller as recited in claim 28, further including: 

a module adapted for transmitting packets stored in the outbound queue. 

31 . The outbound^controller as recited in claim 30, wherein the module 
adapted for transmitting packets includes: 

a moduleyadapted for selectively discarding packets stored in the outbound 
queue. / 

32. The outbound controller as recited in claim 30, wherein the module 
adapted /or transmitting packets stored in the outbound queue includes: 

a module adapted for obtaining a next one of the plurality of inbound 
queues stored in the outbound queue; 

a packet transmission module adapted for transmitting selected packets 
storep in the next one of the plurality of inbound queues; and 
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a memory releasing module adapted for releasing memory associated with 
the next one of the plurality of inbound queues. / 

33. The outbound controller as recited in claim 32/wherein the memory 
releasing module includes: / 

a module adapted for storing the releas^ memory in a free pool of 
available packet buffers. / 

34. The outbound controller as recited in claim 32, wherein the released 
memory forms a new inbound cfueue to be used by an inbound controller. 

35. The outbound controller as recited in claim 32, wherein the released 
memory forms a queue/to be used by the outbound controller during bi- 
directional operationy 

36. The outbou/id controller as recited in claim 28, wherein the queue 
transferring moaule is adapted for transferring the inbound queue to the 
outbound queue according to a priority of the inbound queue. 

37. A router having a plurality of inbound ports and a plurality of outbound 
ports, a pnremory, and a CPU, comprising: 

anfinbound controller coupled to one of the plurality of inbound ports, the 
inbound controller being adapted for receiving an inbound packet; 

Wherein the memory has stored therein: 
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a plurality of inbound queues for the one of the plurality of inbcmila ports; 
and / 

a plurality of outbound queues, each one of the pluralitv/of outbound 
queues corresponding to one of the plurality of outbound jgJorts and being 
capable of storing a plurality of inbound queues; / 

a classifier coupled to the inbound controller; the classifier being adapted 
for classifying the inbound packet in a selectecKone of the plurality of inbound 
queues according to packet sorting criteriawtfne selected one of the plurality of 
inbound queues being associated with opfe of the plurality of outbound queues; 

wherein the inbound controller/is adapted for storing the inbound packet in 
the selected one of the plurality of/nbound queues. 

38. The router as recited inr claim 37, further including: 

an outbound controfler coupled to the inbound controller; 

wherein the inbound controller selects one of the plurality of inbound 
queues to be transferred to the outbound controller; 

wherein the^outbound controller is adapted for storing the selected one of 
the plurality of inbound queues in one of the plurality of outbound queues 
associated withr the packet sorting criteria and transnnitting packets stored in the 
one of the plurality of outbound queues. 

39. The i/outer as recited in claim 37, wherein the inbound controller further 
includes:/ 

a memory obtaining module coupled to the classifier, the memory 
obtainj/ng module being adapted for obtaining memory for an inbound packet to 
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permit the inbound packet to be stored in the selected one of the plurality of 
inbound queues in which the inbound packet is classified. / 

40. The router as recited in claim 38, wherein the outbp<jnd controller further 
includes: X 

a memory releasing module adapted for raleasing selected packet buffers 
associated with packets stored in the one of/tne plurality of outbound queues. 

41 . The router as recited in claim/o, wherein the memory further includes a 
free pool of available packet butters and the memory releasing module is 
adapted for releasing the selected packet buffers into the free pool. 

42. The router as recited in claim 38, wherein the outbound controller further 
includes: / 

a memory rel^sing module adapted for providing a new inbound queue to 
the inbound contrc)ller to replace the selected one of the plurality of inbound 
queues. / 

43. An encryption system, comprising: 

an inoound controller adapted for receiving an inbound packet; 

a cKassifier coupled to the inbound controller and adapted for classifying 
and storing the inbound packet in an inbound queue; 

an outbound controller adapted for receiving the inbound queue; and 
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an encryption box coupled to the outbopda controller, the encryption box 
being adapted for encrypting the inbounjeTqueue to provide an encrypted 
inbound queue to the outbound copfroller for transmission. 

44. The encryption sv^em as recited in claim 43, wherein the outbound 
controller includes^^ outbound classifier adapted for classifying the encrypted 
inbound queue Ui an outbound queue, the outbound controller adapted for 
transmitting data stored in the outbound queue. 
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